field_remote_option

job_industry

field_job_occupational_field_parents_all

job_organization_name

job_upgrade_is_featured

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: Our Security Operations and Threat Response team within Bank of America’s Cyber Security Technology function works to continuously strengthen the bank’s cyber security posture through partnership and delivery of technology to support our threat hunt teams and rapid deployment in response to offensive security engagements. This team works with partners throughout the bank to both discover and develop mitigations from threats to help secure a critical infrastructure around the world that interacts with millions of customers. Role Responsibilities The position of Senior Splunk Detection Engineer is responsible for analyzing and correlating large data sets to uncover novel threats and attack techniques that may be present within the bank’s environments. A Senior Splunk Detection Engineer also will be tasked with and collaborating with data science, threat research, and cyber defense control teams to identify opportunities to develop analytical methods to detect advanced threat actors who utilize emerging tactics and techniques. In support of these processes, the role will also include developing and documenting new and innovative detection content to increase the team’s ability to find existing threats that are otherwise going unidentified or unnoticed. The role will also be expected to actively share knowledge and mentor more junior members of the Security Operations and Threat Response team. The role will work with all Cyber Defense operational and technical teams within Global Information Security (GIS) to gain insight into critical security controls and architectural specifics to develop valuable detection strategies and analytics that identify malicious behavior accurately while maintaining a low false positive rate. This role advises on and reviews product assessments, policy adjustments, and architectural transformations that impact the global Corporation, and will be a thought leader in the design of cutting-edge detective, preventative, and proactive controls. The role will need hands on technical acumen with writing efficient SPL and Macros within short timelines to support detection needs of the firm. Required Skills: <ul> <li>Minimum of 8+ years of experience in a technical role in the areas of Security Operation, Incident Response, Detection Engineering, Defensive Security/Purple Team, or Cyber Threat Intelligence.</li> <li>Direct experience performing content detection engineering and threat hunting in an active corporate environment.</li> <li>Significant experience working with Splunk Procedure Language to create and tune detections.</li> <li>Direct experience working with very large datasets and log analysis tools including but not limited to: Splunk, Python, Pandas, SQL, Hadoop, Hue.</li> <li>Ability to see the larger picture when dealing with competing requirements and needs from across the organization in order to build consensus and drive results.</li> <li>Ability to navigate and work effectively across a complex, geographically dispersed organization.</li> <li>Experience with more than one or more enterprise scale EDR, SIEM, and SOAR tools.</li> <li>Previous experience performing digital forensics or indecent response on major security incidents.</li> <li>Experience analyzing system, network, and application logging for attack techniques at all stages of the cyber kill chain.</li> <li>Experience consuming and analyzing Cyber Threat Intelligence for actionable takeaways</li> <li>Ability to apply Cyber Threat Intelligence through enrichment, correlation, and attribution</li> <li>Familiarity with offensive security strategies and assessment methodology</li> <li>Experience explaining threat hunt objectives in plain English and able to communicate associated risk.</li> <li>Demonstrated ability to self-direct, with minimal supervision to achieve assigned goals.</li> </ul> Beneficial but not required: <ul> <li>Experience with offensive security tools and integration of SIEM, SOAR, CSPM and other technical integrations within large enterprise networks.</li> <li>Knowledge of basic Data Science concepts and processes.</li> <li>Experience performing security analysis and threat hunting in Cloud environments such as Azure, M365, AWS</li> </ul> Skills: <ul> <li>Application Development</li> <li>Automation</li> <li>Influence</li> <li>Solution Design</li> <li>Technical Strategy Development</li> </ul> This job will be open and accepting applications for a minimum of seven days from the date it was posted. Shift:1st shift (United States of America) Hours Per Week: 40

Bank of America

Senior Splunk Detection Engineer

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: The Cybersecurity SDLC Sr. Manager will lead the integration of security practices throughout the Software Development Life Cycle (SDLC). This role involves developing and enforcing security policies, managing risk assessments, and ensuring compliance with Application Security Standards. The executive will collaborate with cross-functional teams to implement secure coding practices, policy development, and training and awareness across the stakeholder community. They will also monitor emerging cybersecurity threats and drive continuous improvement initiatives to enhance overall software security. A deep understanding of cybersecurity frameworks and risk management is required. 10+ years of experience is generally required Required Skills: <ul> <li>Strategic Leadership: Develop and implement cybersecurity strategies throughout the Software Development Life Cycle (SDLC).</li> <li>Risk Management: Identify and mitigate security risks associated with software development and deployment.</li> <li>Policy Development: Create and enforce security policies, standards, and guidelines related to SDLC processes.</li> <li>Teams Collaboration: Collaborate with development, QA, and operations teams to ensure security best practices are integrated at every stage of the SDLC.</li> <li>Training &amp; Awareness: Lead training programs to enhance team awareness of secure coding practices and cybersecurity threats.</li> <li>Compliance Oversight: Ensure adherence to industry regulations and compliance standards (e.g., GDPR, HIPAA).</li> <li>Continuous Improvement: Monitor and assess the effectiveness of security measures, driving continuous improvement initiatives.</li> <li>Stakeholder Engagement: Communicate security risks and strategies to senior management and other stakeholders.</li> <li>Technical Expertise: Significant knowledge of cybersecurity threats, controls and technologies, with a deep understanding/experience with software developer experiences</li> </ul> Responsibilities are the stabilization and transformation of the GIS Secure coding work and continued partnership with EET on the future state of Development Pipeline transformation. <ul> <li>Stability Secure Coding Risk and Issues.</li> <li>Establish and execute a clear path forward for executing Secure Coding and SbD Integration.</li> <li>Establish long term direction for Secure Coding; Start/Stop/Continue</li> </ul> Shift:1st shift (United States of America) Hours Per Week: 40

Cybersecurity Software Development Life Cycle (SDLC) Sr. Manager

Job TitleSenior Manager, Transformation Americas ServicesJob Description SummaryOverall responsible to identify and drive transformation opportunities to meet business needs across Investors Services. Requires independent business interactions across cross functional teams with ability to gather and evaluate requirements, quantify business value of opportunities, design efficient and effective processes, and pilot and implement robust solutions.Job DescriptionResponsibilities:<ul> <li>Manage teams and projects, lead business interactions and assist with transformation proposals within the organization</li> <li>Identify transformation opportunities and business needs; maintain and utilize relationships as well as communication of value proposition</li> <li>Prepare and / or coordinate complex written presentation materials</li> <li>Lead, coach and develop Analysts, providing day to day leadership</li> <li>Perform accurate analysis and design effective solutions to a variety or organizational issues.</li> <li>Strong ability to develop, create, and analyze key metrics.</li> <li>Organize and communicate data in a meaningful way.</li> <li>Ability to evaluation, prioritize and build automations to maximize efficiencies.</li> </ul>Qualifications: <ul> <li>Bachelor’s degree in Finance or Accounting a plus</li> <li>7+ years of related professional work experience </li> <li>Prior people management experience of a small team</li> <li>Ability to assess granular level details to facilitate strategic high-level decision making</li> <li>Effective and efficient time management skills and ability to multi-task</li> <li>Detail oriented, organized, and thorough</li> <li>Proven record of providing excellent internal and external customer service and relationship development</li> <li>Excellent oral and written communications skills, including presentation skills</li> </ul> Cushman &amp; Wakefield also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health, vision, and dental insurance, flexible spending accounts, health savings accounts, retirement savings plans, life, and disability insurance programs, and paid and unpaid time away from work. In addition to a comprehensive benefits package, Cushman and Wakefield provide eligible employees with competitive pay, which may vary depending on eligibility factors such as geographic location, date of hire, total hours worked, job type, business line, and applicability of collective bargaining agreements. The compensation that will be offered to the successful candidate will depend on factors such as whether the position is covered by a collective bargaining agreement, the geographic area in which the work will be performed, market pay rates in that area, and the candidate’s experience and qualifications. The company will not pay less than minimum wage for this role. The compensation for the position is: $106,250.00 - $125,000.00Cushman &amp; Wakefield is an Equal Opportunity employer to all protected groups, including protected veterans and individuals with disabilities. Discrimination of any type will not be tolerated.In compliance with the Americans with Disabilities Act Amendments Act (ADAAA), if you have a disability and would like to request an accommodation in order to apply for a position at Cushman &amp; Wakefield, please call the ADA line at 1-888-365-5406 or email <a href="#">HRServices@cushwake.com</a>. Please refer to the job title and job location when you contact us.INCO: “Cushman &amp; Wakefield”

Cushman & Wakefield

Senior Manager, Transformation Americas Services

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. The Senior Information Security Officer will be a member of the Business Information Security Officer's (BISO) organization and work closely with the line of business Chief Information Officers (CIOs)/Chief Technology Officers (CTOs). In this role, you will be supporting the Real Time Communications and Productivity Team to develop a deep understanding of the business in order to have specialized information security risk-based discussions. This relationship will ensure a focus on the right risk priorities. You will also provide guidance on information security topics, policies and controls. Additionally, this role will support strategic and highly visible portfolio rollouts in our Productivity portfolio including M365 and enabling Artificial Intelligence capabilities on our enterprise meeting platforms. Required Skills • Has a deep understanding of M365 and related components • Information Security &amp; Technology professional with 10+ years of experience in security architecture and/or Information Security • 5+ years of risk management experience with proven ability to effectively apply risk principles to challenging business situations • Subject matter expertise in cloud security, virtualization, application architecture, design patterns, vulnerability testing and development of risk appetite • Experience evaluating cyber security controls and providing guidance for platform or distributed computing platforms, including (Cloud/SaaS/IaaS/PaaS) • Exceptional executive presentation and communication skills • Excellent influencing and problem resolution skills • Ability to be comfortable delivering messages across a wide spectrum of individuals having varying degrees of technical understanding • Strong leadership skills and qualities which enable you to work with peers and various levels of management Desired Skills: • Experience working on cloud implementations in Microsoft Azure, Amazon Web Services and Google Cloud Platform environments • Bachelors and/or Master’s degree in Computer Science, Information Technology or related field Scale/Scope • Possess strong / experienced cybersecurity architecture and/or application security background; with solid knowledge of Financial Service requirements for regulated users • Serves as an Information Security subject matter expert and participates in the development, implementation and maintenance of information security for the line of business (LOB) • Provides guidance and advocacy regarding the prioritization of LOB investments that impact information security • Advises LOB management on risk issues related to information security and recommends actions in support of the bank's wider risk management and compliance programs • Consults on M365 Security Baselines • Exchange online, Sharepoint online, Teams and more • Consults on Mobile security strategy, design, implementation and migration for LOB projects • For key initiatives – Assess security opportunities and challenges and partner to determine best future state • Influence and drive collaboration across teams for key initiatives, bringing in key stakeholders • Serve as subject matter expert in BISO process and participate in training for new employees • Monitors information security trends internal and external to the bank and keeps LOB leadership informed about information security-related issues • Serve as the backup for teammate responsible for supporting our End User Platforms – another high profile &amp; visible portfolio • For key initiatives – Assess security opportunities and challenges and partner to determine best future state • Ensures user experience is top of mind and never sacrifices security • Ensures compliance with policies and laws This job will be open and accepting applications for a minimum of seven days from the date it was posted. Shift:1st shift (United States of America) Hours Per Week: 40

Sr. Business Information Security Officer - Employee Experience Technology

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being. Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization. Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us! Job Description: Manual Ethical Hacking is part of the Application Development Security Framework Program within Bank of America’s Cyber Security Assurance Offensive Security group. The program provides services to assess the security resilience of the bank’s applications to malicious hacking activity. This senior technical role is responsible performing and leading ethical hacking assessments of the bank's technologies, applications, and cyber security controls while adapting testing methods to evolving and emerging threats. Key responsibilities include leading and performing research, understanding the bank's security policies, working with appropriate partners to complete assessments and simulations, identifying misconfigurations and vulnerabilities, and reporting on associated risk. These individuals partner closely with security partners, CIO clients and multiples lines of business. These individuals are expected to perform application security-oriented dynamic and static assessments across a multitude of technologies including web UI, web APIs, mobile and cloud, including associated source code. Key Responsibilities in order of importance: <ul> <li>Perform assigned analysis of internal and external threats on information systems and predict future threat behavior.</li> <li>Incorporate threat actors' tactics, techniques, and procedures into offensive security testing to identify high-value vulnerabilities/chained attacks.</li> <li>Developing Proof-of-concepts for exploitation.</li> <li>Perform assessments of the security, effectiveness, and practicality of multiple technology systems.</li> <li>Leverage innovative thinking to help solve problems or introduce new ideas to processes or products applicable to offensive security.</li> <li>Prepare and present detailed technical information for various media including documents, reports, and notifications.</li> <li>Provide clear and practical advice regarding managing risks.</li> <li>Learn and develop advanced technical and leadership skills, mentor Junior and Intermediate assessors in technical tradecraft and soft skills.</li> <li>Respond to security incidents and provide technical assistance to leadership across the Information Security organization.</li> </ul> Required Skills: <ul> <li>Minimum of 5+ years of professional pentesting, application security or ethical hacking experience, preferably in a large, complex, enterprise environment</li> <li>Detailed technical knowledge in at least 5 of the following areas:<ul> <li>security engineering</li> <li>application architecture</li> <li>authentication and security protocols</li> <li>application session management</li> <li>applied cryptography</li> <li>common communication protocols</li> <li>mobile frameworks</li> <li>single sign-on technologies</li> <li>exploit automation platforms</li> <li>Web APIs</li> <li>Cloud environments</li> <li>LLM security</li> </ul> </li> <li>Able to manually identify and reproduce findings, discuss remediation concepts, develop PoCs for vulnerabilities, use scripting/coding techniques, proficiently execute common penetration testing tools, triage, and support incidents, and produce high value findings</li> <li>Experience performing manual web application assessments i.e., must be able to simulate a OWASP Top 10 vulnerabilities without the use of tools</li> <li>Experience performing manual code reviews for security relevant issues</li> <li>Experience working with DAST and SAST tools to identify vulnerabilities</li> <li>Knowledge of network and Web related protocols/technologies (e.g., UNIX/LINUX, TCP/IP, Cookies)</li> <li>Experience with vulnerability assessment tools and penetration testing techniques.</li> <li>Solid programming/debugging skills, development frameworks, CVE and CWE research/reproduction</li> <li>Threat Analysis, threat modelling and SBOM analysis</li> <li>Innovative thinking, threat actor simulation</li> <li>Technology Systems Assessment</li> <li>Technical Documentation</li> <li>Advisory</li> </ul> Desired: <ul> <li>CEH, OSCP/OSCE/OSWE/GXPN/GPEN/GWAPT/GMOB/All Practitioner Certs [Port Swigger BSP Academy]/Cloud Cert(s)/ eWPT; eWPTX; eMAPT [INE Pentester Academy] </li> <li>Strong programming/scripting skills</li> </ul> This job will be open and accepting applications for a minimum of seven days from the date it was posted. Shift:1st shift (United States of America) Hours Per Week: 40

Senior Manual Ethical Hacker

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Position Summary Bank of America is looking for an experienced ServiceNow business analyst to help implement ServiceNow’s SecOps modules in a new, “greenfield” ServiceNow instance. This job is responsible for capturing and refining business needs into actionable requirements for ServiceNow developers. Job expectations include working closely with key stakeholders to ensure business outcomes are delivered, assisting with troubleshooting, creating documentation, and assisting with user training. Key Responsibilities: <ul> <li>Responsible for capturing and refining business and system requirements for the ServiceNow SecOps modules.</li> <li>Works with stakeholders to understand their needs, analyze problems, and capture their requirements, and then working closely with the Development Team to refine the requirement into specifications that can be executed by the team.</li> <li>Possess a working knowledge of Cybersecurity best practices, vulnerability management lifecycle, and ServiceNow configuration.</li> <li>Leverages experience and understanding of stakeholder needs to help create a solution, envisions the solution to solve a problem (manual or through software).</li> <li>Performs Cost/Benefit Analysis to align the technology to business strategy. Gathers &amp; catalogs functional, non-functional, and technical requirements for stakeholder requests.</li> <li>Determines the impact of modifications and enhancements on the ServiceNow SecOps modules and platform.</li> <li>Acts as the ServiceNow SecOps subject matter expert to support scope and requirement decisions.</li> <li>Ensures changes to the application are compliant with bank standards and policies.</li> <li>Assists users and development team with application testing and troubleshooting. May help configure test solutions to validate functional and system needs.</li> <li>Identify, document, and troubleshoot application related problems.</li> <li>Documents process, procedures, and workflows associated with the relevant ServiceNow modules and external applications.</li> <li>Leads or participates in continuous improvement efforts; Building expertise in creating, analyzing, and improving processes.</li> <li>Ability to create, maintain, and present training materials for end-users.</li> </ul> Qualifications: <ul> <li>1+ years of experience translating business needs into requirements for a ServiceNow implementation or major enhancement project.</li> <li>Hands-on experience with ServiceNow, including familiarity with at least 1 module.</li> <li>Prior experience in an IT or Cybersecurity role.</li> <li>Strong interpersonal and written/verbal communication skills, with the ability to present complex ideas clearly and effectively.</li> <li>Familiarity with Agile development practices.</li> </ul> Desired Certifications: <ul><li>ServiceNow Certified Systems Administrator (CSA) certification</li></ul> Enterprise Role Overview: Responsible for capturing and refining business and/or system requirements (based on specialization). Works with stakeholders to understand their needs, analyze problems, and capture their requirements, and then working closely with the Development Team to refine the requirement into specifications that can be executed by the team. Possess a working knowledge of the business and/or technical domain based on their specialization. Leverages experience and understanding of stakeholder needs to help create a solution, envisions the solution to solve a problem (manual or through software). Performs Cost/Benefit Analysis to align the technology to business strategy. Gathers &amp; catalogs functional, non-functional, and technical requirements for stakeholder requests. Determines the impact of modifications and enhancements on the application. Acts as the product(s) subject matter expert to support scope and requirement decisions. Ensures changes to the application are compliant with bank standards and policies. Assists users and development team with application testing and troubleshooting, and may help configure test solutions to validate functional and system needs. Identifies, document and troubleshoot application related problems. Documents process, procedures and workflows associated with applications. Leads or participate in continuous improvement efforts; Building expertise in creating, analyzing, and improving processes. Creates, maintains and presents training materials for end-users. Individual contributor. Shift:1st shift (United States of America) Hours Per Week: 40

ServiceNow Business Analyst

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: The ServiceNow Platform Administrator will play a key role in maintaining the ServiceNow platform as defined by the Product teams. This role will provide hands-on technical expertise to resolve service availability issues which includes coordinating cross team efforts to perform root cause analysis and problem resolution. You will work in a team environment to plan and implement software (or hardware) changes. You will participate in the various phases of the application lifecycle, including plan, server build and software installation, release implementation, continuous improvement, and decommission. At these early stages of our ServiceNow deployment, sharing knowledge and developing a documentation library as a team will be essential to our success. This job is responsible for leading the planning, designing, and implementation of complex infrastructure solutions to meet deployment requirements aligned with available playbooks and technical blueprints. Key responsibilities include providing and communicating technology solutions across audiences and overseeing projects and activities related to special initiatives or operations. Job expectations include leading the resolution process for problems, adhering to defined practices and policies to obtain results, and establishing input/output processes and working parameters for systems. Responsibilities: <ul> <li>Maintain and support the ServiceNow platform while adhering to bank policies and standards</li> <li>Manage ServiceNow code quality control processes and routines</li> <li>Respond to incidents for application availability issues as part of on-call duties</li> <li>Respond to incidents/pages for application functional issues or questions as part of daily duties</li> <li>Use your technical knowledge to triage service availability issues and restore service</li> <li>Research and resolve system defects, lead root cause analysis, and drive permanent resolution</li> <li>Ensure appropriate monitoring is in place and maintained to ensure application availability</li> <li>Participate in software release implementation meetings</li> <li>Participate in and coordinate maintenance activities</li> <li>Prepare and maintain application support/process documentation</li> <li>Develop management jobs, automation routines, or deployment scripts</li> <li>Manages and prioritizes multiple tasks and assignments for the team including tracking tasks and tickets in system(s) of record, ensuring enterprise service level agreements are met, and participating in defect, incident, problem, and change review meetings and release activities</li> <li>Works with appropriate teams to ensure alerts, monitoring, dashboards, and processes are established appropriately for new projects and initiatives</li> <li>Participates and helps with resource interviews and onboarding processes</li> <li>Performs access reviews, conducts compliance activities, and serves as a delegate for administrative processes</li> <li>Fulfills requests from business users and operations, communicates technical status updates with appropriate teams, and oversees stability, resiliency, reliability, and the performance of multiple supported systems</li> <li>Mentors other team members and provides technical leadership</li> <li>Captures and translates business requirements into complex infrastructure and/or system design for specific implementations and collaborates with technology stakeholders, Solution Delivery Management teams, Technology Project Management teams, Solutions Engineering teams, and technical service providers for system design and deployment</li> <li>Supports change implementations, proactively identifies and resolves potential issues resulting from the changes, and performs access and/or physical provisioning/deprovisioning (additions, modifications, and deletions) for infrastructure and applications</li> <li>Provides consulting services to Core Technology Infrastructure (CTI) and technical partners, executes procedures reliably, and escalates appropriately to solve incidents quickly</li> <li>Provides release support when needed and manages engagement across audiences</li> <li>Provides full lifecycle management of the infrastructure and application environments</li> </ul> Required Qualifications: <ul> <li>Minimum of 5+ years of experience a ServiceNow administration with emphasis on platform management</li> <li>Must have an active and verifiable ServiceNow Certified System Administrator (CSA) certification</li> <li>Proven experience as an administrator in highly regulated environments</li> <li>Experience in maintaining multiple ServiceNow environments</li> <li>Experience monitoring and maintaining ServiceNow products, supporting software engineering, maximizing data processing systems, building cloud-compatible services, and operating within an enterprise IT lifecycle</li> <li>Experience supporting ServiceNow integrations for security, risk, and compliance</li> <li>Experience with ServiceNow instance cloning and management</li> <li>Experience maintaining both Windows and Linux MID servers</li> </ul> Desired Qualifications: <ul> <li>ServiceNow certified implementation specialist (CIS)</li> <li>ServiceNow certified application developer (CAD)</li> <li>Experience in financial institution information technology security, compliance with rules, regulations, and financial industry standards</li> <li>Experience leveraging MID servers for integration and automation</li> <li>Experience with ServiceNow Discovery and other Configuration Management Database (CMDB)population toolsets</li> </ul> Skills: <ul> <li>Systems Administration</li> <li>Result Orientation</li> <li>Risk Management</li> <li>Solution Design</li> <li>Adaptability</li> <li>Analytical Thinking</li> <li>Collaboration</li> <li>Influence</li> <li>Solution Delivery Process</li> <li>Architecture</li> <li>Automation</li> <li>DevOps Practices</li> <li>Project Management</li> <li>Stakeholder Management</li> </ul> Shift:1st shift (United States of America) Hours Per Week: 40

ServiceNow Platform Administrator

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: Manual Ethical Hacking is part of the Application Development Security Framework Program within Bank of America’s Cyber Security Assurance Offensive Security group. The program provides services to assess the vulnerability of the bank’s applications to malicious hacking activity. This technical role is responsible for performing application security assessments of the bank's technologies, applications, and cyber security controls while adapting testing methods to evolving and emerging threats. Key responsibilities include performing research, understanding the bank’s security policies, working with the appropriate partners to complete assessments and simulations, identifying misconfigurations and vulnerabilities, and reporting on associated risk. These individuals partner closely with security partners, CIO clients and multiples lines of business. Key Responsibilities in order of importance: <ul> <li>Perform assigned analysis of internal and external threats on information systems and predict future threat behavior</li> <li>Incorporate threat actors' tactics, techniques, and procedures into offensive security testing</li> <li>Perform assessments of the security, effectiveness, and practicality of multiple technology systems</li> <li>Leverage innovative thinking to help solve problems or introduce new ideas to processes or products applicable to offensive security.</li> <li>Prepare and present detailed technical information for various media including documents, reports, and notifications</li> <li>Provide clear and practical advice regarding managed risks</li> </ul> Required Skills: <ul><li> Minimum of 4 years of professional experience in Information Technology or preferably Information Security/Cybersecurity</li></ul> <ul><li>Hands on experience with pentesting, application security or ethical hacking experience, preferably with a completed certification, e.g.: CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar</li></ul> <ul> <li>Technical knowledge in at least 3 of the following areas: security engineering; application architecture; authentication and security protocols; application session management; applied cryptography; common communication protocols; mobile frameworks; single sign-on technologies; exploit automation platforms; RESTful web services</li> <li>Experience working with SAST tools to identify vulnerabilities</li> <li>Able to manually identify and reproduce findings, discuss remediation concepts, develop PoCs for vulnerabilities, use scripting/coding techniques, proficiently execute common penetration testing tools, triage, and support incidents, and produce high value findings</li> <li>Experience performing manual web application assessments i.e., must be able to simulate a SQL injection/XSS attack without the use of tools</li> <li>Knowledge of network and Web related protocols/technologies (e.g., UNIX/LINUX, TCP/IP, Cookies)</li> <li>Experience with vulnerability assessment tools and penetration testing techniques</li> <li>Solid programming/debugging skills</li> <li>Experience of using a variety of tools, included, but not limited to, IBM AppScan, Burp and SQL Map</li> <li>Threat Analysis</li> <li>Innovative Thinking</li> <li>Technology Systems Assessment</li> <li>Technical Documentation</li> <li>Advisory</li> </ul> Shift:1st shift (United States of America) Hours Per Week: 40

Manual Ethical Hacker

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Summary: Client Protection is looking for an experienced analytical leader to join the digital commerce fraud strategy team. This is an exciting opportunity given the constantly evolving nature of digital adoption and attacks in marketplace as well as in money movement. The incumbent will be responsible for managing a team focused on fraud and scam prevention strategies for key digital money movement channels. Responsibilities will include, working across multiple lines of business; partnering with product, technology, operations, vendors, and others; responsibility for the overall first party fraud loss line; and evaluating various internally developed and vendor provided machine learning tools to maximize client experience while managing fraud most effectively. As a Fraud Strategy Manager with the Client Protection organization, you will capitalize on technical abilities and strategic thinking to solve business challenges and seek opportunities for improvement. You will join a team of fraud professionals who are dedicated to stopping criminals and protecting customers. In the role you will spend time analyzing difficult problems as we try to stay one step ahead of the fraudsters. You will develop complex defenses designed to minimize the impact to good customers while maximizing fraud loss avoidance. You will work across multiple partner organizations and represent our team as a subject matter expert. We are looking for someone with strong communication skills, sound business judgement, results oriented with a track record of thriving in a fast-paced entrepreneurial environment. The role will be responsible for several key areas: • Develop and implement robust third-party fraud and scam detection program rooted in digital space to safeguard the organization against financial fraud. • Provide recommendations on mitigation efforts, ensuring monitors are in place, and will self-create initiatives as needed. • Lead a team of fraud analysts in the identification, investigation, and mitigation of fraud activity. • Collaborate with cross-functional teams to integrate fraud detection measures into existing systems and processes. • Stay abreast of industry trends, emerging threats, and technological advancements to continuously enhance fraud prevention methodologies. • Analyze data and conduct investigations to identify patterns, trends, and anomalies indicative of potential fraud. • Identifying new sources of data (internal or vendor-provided) that can enrich our existing detection processes, be added to our decision systems, and allow for new detection strategies to be developed. Will require close coordination with partners in Fraud Technology. • Drive the development of new models designed to detect fraud activity. • Ensuring proper risk controls are deployed, while adhering to best practices. • Provide oversight on defect reviews of 3rd party/scam loss cases to identify any gaps in Fraud strategy and/or procedural adjustments. • Providing fraud requirements, testing, and development of strategies for new project and endeavors • Lead the team to Develop, implement, and continuously improve fraud detection algorithms and systems. Perform regular audits and analysis of transaction data to detect new fraud trends. • Guiding team to Develop new fraud strategies using statistical and analytical techniques. Goal will be to identify and mitigate new and emerging fraud threats. • Design and monitor key fraud metrics and KPIs to evaluate the effectiveness of fraud prevention. • Monitor Strategy performance and Optimization of existing detection strategies to determine areas where rules can be adjusted to decline fewer false positives and improve the ROI and overall performance of our fraud strategies. • Systems Integration: Integrate fraud detection systems with core banking and transaction processing systems using APIs and middleware solutions. Collaborate with IT and software development teams to ensure seamless integration and functionality of fraud management systems. Manage and optimize the performance of fraud detection systems and tools. • Policy and Strategy Development: Stay updated with the latest fraud trends, regulatory requirements, and best practices. Lead the creation and refinement of fraud detection and prevention strategies. • Work closely with compliance, legal, risk management, and other relevant departments to align fraud management efforts with organizational goals. Conduct training sessions and workshops to educate staff on fraud detection techniques and policies. • Identify process improvements and efficiencies via data analysis. • Deliver accurate metrics related to fraud and claim activity. Validate the integrity and quality of data required for performing analysis. • Partner with claims, policy, strategy, and product teams to deliver data insights and analysis that inform critical decisions and help achieve goals. Required Qualifications: • 3+ years of experience in advanced to expert level in SQL and SAS • Minimum 7 years of work experience in large financial institution with specialization in data analytics • Minimum 5 years of experience in managing teams. Desired Qualifications: • The candidate must be at an advanced to expert level in SAS and SQL. Should also have familiarity with other programming languages such as Python, R, or Java. Knowledge of data extraction tools such as Hive or Hue will be useful. • Experience in Statistical model utilization • 3+ years of decision tree development • Experience in managing fraud for digital products (Zelle, Wires, ACH, Bill pay) • Expertise in fraud detection and management platforms, specifically SAS Fraud Management and creation of user defined variables for rule development. • Ability to work in a fast-paced, dynamic environment is critical. • Must have exceptional organizational, project management and communications skill. • Candidate must have a proven track record of building and deploying analytical solutions that have resulted in material financial results. • Ability to work independently as well as effectively work in teams with individuals with a variety of skills and backgrounds. • Advanced analytical and quantitative skills with demonstrated ability in using data and metrics to identify root causes. • Basic understanding of 1st and 3rd party fraud (claims to charge-off timing, chargeback recovery rights, etc.) • Proven strong analytical and communication skills. • Experience in working with tools like SAS E-miner and use machine learning models to identify patterns and anomalies in transaction data indicative of fraudulent activity. • Bachelor’s degree, preferably in a quantitative discipline such as mathematics, statistics, operations research, engineering, computer science, finance, or business. Skills: <ul> <li>Analytical Thinking</li> <li>Business Analytics</li> <li>Data Mining</li> <li>Fraud Management</li> <li>Business Process Analysis</li> <li>Critical Thinking</li> <li>Influence</li> <li>Relationship Building</li> <li>Strategy Planning and Development</li> <li>Business Case Analysis</li> <li>Issue Management</li> <li>Leadership Development</li> <li>Process Performance Measurement</li> <li>Recruiting</li> </ul> Shift:1st shift (United States of America) Hours Per Week: 40

Fraud Analytics and Innovation Senior Leader - Client Protection

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: This job is responsible for providing comprehensive advice and customized solutions to clients to help them achieve their financial goals. Key responsibilities include triaging client leads, making referrals to business partners based on client needs and asset thresholds, meeting with clients to review financial and investment goals, building a financial plan, and recommending brokerage products. Job expectations include applying and expanding knowledge by completing required licenses and trainings. This position is subject to SAFE Act registration requirements. Pursuant to the SAFE Act requirements, all employees engaged in residential loan mortgage originations must register with the federal registry system and remain in good standing. Since this position requires SAFE Act registration, employees are required to register and to submit to the required SAFE Act background check and registration process. Failure to obtain and/or maintain SAFE Act registration may result in disciplinary action up to and including termination. Responsibilities: • Works with clients to plan their short and long-term financial goals by building a financial plan with brokerage products, including stocks, bonds, mutual funds, annuities, and banking and money managed solutions • Recommends banking and investments strategies that align with client financial goals and needs • Triages client requests and makes referrals to appropriate internal service providers based on client needs and asset thresholds • Mitigates and controls risk as part of daily activities • Identifies and engages potential new clients through referrals or financial center clientele • Provides coaching and feedback to referral partners based on knowledge of client needs and potential product services recommended Required Qualifications: • Currently holds Series 7 &amp; 66 (63 &amp; 65 in lieu of 66) licenses. If you do not currently hold the 66 but have either a 63 or 65, an offer can be extended with the condition that a passing score is received for the missing series within 60 days. • Has at least one year experience in the investments industry, including investment training and in-depth knowledge of investment products and services. • Has at least one year experience working in the financial service industry and/or a sales environment where goals were met or exceeded. • Sets and accomplishes goals, achieving whatever you put your mind to. • Builds and nurtures strong relationships. • Collaborates effectively with others to get things done. • Communicates effectively and confidently and is comfortable engaging all clients. • Manages goals, navigates complexity, prioritizes tasks and executes in a fast-paced environment. • Likes to learn, adapts to new information and seeks the right solutions for clients. • Efficiently manages your time and capacity. • Is thorough and thoughtful in incorporating relevant regulatory due diligence into daily activities and long-term strategies for clients. Desired Qualifications: • Strong computer skills with an ability to multitask in a demanding environment. • At least three years’ experience working in the financial service industry and/or a sales environment where goals were met or exceeded. • Achieved additional professional designations such as Certified Financial Planner (CFP) and/or Chartered Retirement Planning Counselor (CRPC). • Obtained your insurance licenses. • Bilingual Spanish Preferred Skills: • Advisory • Account Management • Client Experience Branding • Customer and Client Focus • Oral Communications • Issue Management • Client Solutions Advisory • Pipeline Management • Active Listening • Attention to Detail • Risk Management • Policies, Procedures, and Guidelines • Client Management • Causation Analysis • Written Communications *Please note that this requisition contains multiple locations but there is not an immediate opening for every location listed. Shift:1st shift (United States of America) Hours Per Week: 40

118 Jobs in Northfield, IL, USA